Privacy
What Velfile does with your files and your data.
Your files stay on your device
Velfile's tools (Compress Image, Resize Image, Crop Image, Image Converter, Remove Background, ID Photo, Enhance Photo, JPG to PDF, Merge PDF, Split PDF, Compress PDF, Page Numbers, Watermark PDF, Sign PDF, Organize PDF, PDF to JPG and Word to PDF) run in your browser. The files you choose are read and processed on your own device. Velfile does not upload them to a server and cannot see them.
Passing a file from the home page to a tool
When you pick a file on the home page and open a tool, the file is saved temporarily in your browser's storage so the tool can open it. The tool removes it as soon as it picks it up. If you never open the tool, the copy is removed the next time the Velfile home page opens, or when you clear this site's data.
What Velfile does not do
- An account is optional. Every tool works without logging in.
- Without logging in, Velfile sets no cookies of its own. Your ad choice and display theme (light/dark) are kept in your browser's local storage. Cookies are only set if you log in (see Accounts and login). It uses Cloudflare Web Analytics, which counts visits without cookies and does not track you across sites or see your files.
- Your files are never used for advertising. Ads do not see them.
Accounts and login (optional)
You can create an account, but every tool still works without logging in. If you sign up or log in, Velfile stores your account data in a Cloudflare D1 database:
- Your email, name, sign-up time and last login time.
- If you sign up with email, your password is stored only as a hash (PBKDF2), never as plain text.
- If you log in with Google, Velfile receives your Google account ID, email and name from Google. Velfile never gets your Google password.
- The last settings of each tool (for example quality, format and size) so they fill in automatically. File names and file contents are never saved.
- Temporary links for email verification and password reset, stored only as a hash and expiring automatically (1 hour for reset, 7 days for verification).
- Two cookies: a session cookie (HttpOnly) that keeps you logged in for up to 30 days or until you log out, and a simple marker used to show the right button in the header. Your IP address is recorded briefly, only to limit excessive login attempts.
Your files are never sent to a server, with or without an account. You can delete your account at any time on the Account page. Your email, name, password, saved settings and login sessions are removed from the database right then. Verification and password reset emails are sent through the email delivery service Resend, which receives your email address only to send that message. If you need help, get in touch through the Contact page.
Third-party services
Some parts of the site come from other companies, so your browser connects to them when a page loads:
- Google is also used if you choose to log in with Google; you are sent to Google's own login page.
- Cloudflare hosts the site. Like most hosts, it may keep technical logs such as IP addresses and requested pages.
- Google Fonts provides the fonts, loaded from Google's servers.
- Google AdSense serves the ads (see Advertising below).
- cdnjs is only a backup source for the pdf.js, pdf-lib, JSZip and HEIC libraries, which Velfile hosts itself. It is contacted only if a library cannot be loaded from Velfile. Only the libraries are loaded from there. Your files are not sent.
- Hugging Face provides the AI model used by the Remove Background, ID Photo and Enhance Photo (AI mode) tools. It is contacted only when you use one of those tools, to download the model. The code that runs the model is hosted by Velfile itself. Your photo is not sent.
Advertising
Velfile shows ads from Google AdSense. Google and its partners may use cookies or similar technologies to show ads based on your visits to this and other websites. This is separate from your files, which stay on your device. You can manage personalized ads in Google Ads Settings, or learn more in how Google uses data from sites that use its services.
Your ad choice
The first time you visit, a banner asks whether you allow personalized ads. If you choose non-personalized ads or do not answer, Velfile asks Google to show ads that are not based on your past browsing. Your choice is saved in your browser and you can change it at any time.
Children
Velfile is a general-purpose tool and is not directed at children under 13. It does not ask for any personal information, except your email and name if you choose to create an account.
Changes
If Velfile adds anything else that changes this page, the page will be updated. Questions? See the Contact page.
Last updated: 23 October 2026